Absolute Poker Network Encryption Vulnerability

www.pokertableratings.com The Cereus poker network uses a weak xor based encryption mechanism for all network transmissions instead of the industry standard SSL. The encryption key can be easily identified from a network dump and used to decrypt all information transmitted between the client application and the Cereus servers. In our lab we are able to intercept and decode the user’s login name (e-mail address), and receive an MD5 hash of their password, as well as their seat number and hole cards. Once the MD5 password hash has been intercepted, we’ve been able to log in using the intercepted login name by overwriting the outgoing login packet with the intercepted MD5 hash – thus logging in the victim’s poker account without their knowledge, remotely. We’ve also been able to remotely display all seat numbers and hole cards on a compromised network.